IG (subwords)
D-Link ▁D IR - 8 59 routers ▁before ▁v 1 . 07 b 03 _ bet a ▁allow Unauthenticated ▁In for matio ▁ n Disclosure ▁via ▁the ▁A UT HOR I Z ED _ G RO UP = 1% 0 a ▁value ▁as ▁demonstrated ▁by ▁v p n config . php . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value as demonstrated by vpnconfig.php.

SHAP (words)
D- Link DIR- 859 routers before v1. 07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP= 1% 0a value as demonstrated by vpnconfig. php

IG (subwords)
[CLS] D-Link D IR - 85 ##9 routers before v ##1 . 07 ##b ##0 ##3 _ beta allow Unauthenticated In ##fo ##r matio n Disclosure via the AU ##TH ##OR ##I ##Z ##ED _ G ##RO ##UP = 1 % 0 ##a value as demonstrated by v ##p ##n config . php . [SEP]

LRP (+Pred, pos-only)
[CLS] D-Link D IR - 85 ##9 routers before v ##1 . 07 ##b ##0 ##3 _ beta allow Unauthenticated In ##fo ##r matio n Disclosure via the AU ##TH ##OR ##I ##Z ##ED _ G ##RO ##UP = 1 % 0 ##a value as demonstrated by v ##p ##n config . php . [SEP]

LIME (words)
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value as demonstrated by vpnconfig.php.

SHAP (words)
D- Link DIR- 859 routers before v1. 07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP= 1% 0a value as demonstrated by vpnconfig. php

IG (subwords)
[CLS] D-Link D IR - 85 ##9 routers before v ##1 . 07 ##b ##0 ##3 _ beta allow Unauthenticated In ##fo ##r matio n Disclosure via the AU ##TH ##OR ##I ##Z ##ED _ G ##RO ##UP = 1 % 0 ##a value as demonstrated by v ##p ##n config . php . [SEP]

LRP (+Pred, pos-only)
[CLS] D-Link D IR - 85 ##9 routers before v ##1 . 07 ##b ##0 ##3 _ beta allow Unauthenticated In ##fo ##r matio n Disclosure via the AU ##TH ##OR ##I ##Z ##ED _ G ##RO ##UP = 1 % 0 ##a value as demonstrated by v ##p ##n config . php . [SEP]

LIME (words)
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value as demonstrated by vpnconfig.php.

SHAP (words)
D- Link DIR- 859 routers before v1. 07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP= 1% 0a value as demonstrated by vpnconfig. php

IG (subwords)
▁Use ▁after ▁free ▁in ▁Overview ▁Mode ▁in ▁Google Chrome ▁on Chrome ▁OS ▁prior ▁to ▁109 . 0 . 54 14 . 74 ▁allowed ▁a ▁remote ▁attacker ▁who ▁convinced ▁a ▁user ▁to ▁engage ▁in spec ▁ ific UI ▁interactions ▁to ▁potentially ▁exploit ▁heap ▁corruption ▁via ▁a ▁crafted HTML ▁page . ▁ ( Chromium ▁security ▁severity : ▁High ) <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

SHAP (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109. 0. 5414. 74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. ( Chromium security severity: High

IG (subwords)
[CLS] Use after free in Over ##view Mode in Google Chrome on Chrome OS prior to 109 . 0 . 54 ##14 . 74 allowed a remote attacker who convinced a user to engage in spec if ##ic UI int era ##ctions to potentially exploit heap corruption via a crafted HTML page . ( Chromium se ##c uri t ##y severity : High ) [SEP]

LRP (+Pred, pos-only)
[CLS] Use after free in Over ##view Mode in Google Chrome on Chrome OS prior to 109 . 0 . 54 ##14 . 74 allowed a remote attacker who convinced a user to engage in spec if ##ic UI int era ##ctions to potentially exploit heap corruption via a crafted HTML page . ( Chromium se ##c uri t ##y severity : High ) [SEP]

LIME (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

SHAP (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109. 0. 5414. 74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. ( Chromium security severity: High

IG (subwords)
[CLS] Use after free in Over ##view Mode in Google Chrome on Chrome OS prior to 109 . 0 . 54 ##14 . 74 allowed a remote attacker who convinced a user to engage in spec if ##ic UI int era ##ctions to potentially exploit heap corruption via a crafted HTML page . ( Chromium se ##c uri t ##y severity : High ) [SEP]

LRP (+Pred, pos-only)
[CLS] Use after free in Over ##view Mode in Google Chrome on Chrome OS prior to 109 . 0 . 54 ##14 . 74 allowed a remote attacker who convinced a user to engage in spec if ##ic UI int era ##ctions to potentially exploit heap corruption via a crafted HTML page . ( Chromium se ##c uri t ##y severity : High ) [SEP]

LIME (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

SHAP (words)
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109. 0. 5414. 74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. ( Chromium security severity: High

IG (subwords)
▁A ▁vulnerability ▁which ▁was ▁ cla ssi ▁ fi ed ▁as ▁problematic ▁has ▁been ▁found ▁in SourceCodester ▁Simple ▁Park ing Manage ▁ ment ▁System ▁1 . 0 . Affected ▁by ▁this ▁issue ▁is ▁some ▁unknown ▁functionality ▁of ▁the ▁file ▁ / ci _ s pm s / admin ▁ / search / search ing / . ▁The ▁manipulation ▁of ▁the ▁argument ▁search ▁with ▁the ▁input ▁ " > < sc ▁rip t > al ert ( " XSS ▁ " ) </ sc ▁rip t > ▁leads ▁to ▁cross ▁site scripting ▁ . ▁The ▁attack ▁may ▁be ▁launched ▁remotely . ▁The ▁exploit ▁has ▁been disclose ▁ d ▁to ▁the ▁public ▁and ▁may ▁be ▁used . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument search with the input "><script>alert("XSS")</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

SHAP (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1. 0. Affected by this issue is some unknown functionality of the file / ci_spms/ admin/ search/ searching/. The manipulation of the argument search with the input ">< script> alert(" XSS")</ script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used

IG (subwords)
[CLS] A vulnerability which was c ##la ssi fi ##ed as problematic has been found in SourceCodester Simple Park ##ing Manage men ##t System 1 . 0 . Affected by this issue is some unknown functionality of the file / c ##i _ s ##pm ##s / admin / search / searching / . The man ip ul ##ation of the argument search with the input " > < sc r ip t > alert ( " XSS " ) < / sc r ip t > leads to cross s ite scripting . The attack may be launched remotely . The exploit has been disclose d to the public and may be used . [SEP]

LRP (+Pred, pos-only)
[CLS] A vulnerability which was c ##la ssi fi ##ed as problematic has been found in SourceCodester Simple Park ##ing Manage men ##t System 1 . 0 . Affected by this issue is some unknown functionality of the file / c ##i _ s ##pm ##s / admin / search / searching / . The man ip ul ##ation of the argument search with the input " > < sc r ip t > alert ( " XSS " ) < / sc r ip t > leads to cross s ite scripting . The attack may be launched remotely . The exploit has been disclose d to the public and may be used . [SEP]

LIME (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument search with the input "><script>alert("XSS")</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

SHAP (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1. 0. Affected by this issue is some unknown functionality of the file / ci_spms/ admin/ search/ searching/. The manipulation of the argument search with the input ">< script> alert(" XSS")</ script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used

IG (subwords)
[CLS] A vulnerability which was c ##la ssi fi ##ed as problematic has been found in SourceCodester Simple Park ##ing Manage men ##t System 1 . 0 . Affected by this issue is some unknown functionality of the file / c ##i _ s ##pm ##s / admin / search / searching / . The man ip ul ##ation of the argument search with the input " > < sc r ip t > alert ( " XSS " ) < / sc r ip t > leads to cross s ite scripting . The attack may be launched remotely . The exploit has been disclose d to the public and may be used . [SEP]

LRP (+Pred, pos-only)
[CLS] A vulnerability which was c ##la ssi fi ##ed as problematic has been found in SourceCodester Simple Park ##ing Manage men ##t System 1 . 0 . Affected by this issue is some unknown functionality of the file / c ##i _ s ##pm ##s / admin / search / searching / . The man ip ul ##ation of the argument search with the input " > < sc r ip t > alert ( " XSS " ) < / sc r ip t > leads to cross s ite scripting . The attack may be launched remotely . The exploit has been disclose d to the public and may be used . [SEP]

LIME (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument search with the input "><script>alert("XSS")</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

SHAP (words)
A vulnerability which was classified as problematic has been found in SourceCodester Simple Parking Management System 1. 0. Affected by this issue is some unknown functionality of the file / ci_spms/ admin/ search/ searching/. The manipulation of the argument search with the input ">< script> alert(" XSS")</ script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used

IG (subwords)
▁All ▁versions ▁of ▁archive r ▁allow ▁attacker ▁to ▁perform ▁a Zip ▁Slip ▁attack ▁via ▁the ▁ " un arch ive " ▁functions . ▁It ▁is ▁exploited ▁using ▁a spec ▁ i ally ▁crafted ▁zip ▁archive ▁that ▁holds ▁path traversal filenames ▁ . ▁When ▁exploited ▁a filename ▁in ▁a malicious ▁archive ▁is concatenated ▁to ▁the ▁target ▁extraction ▁directory ▁which ▁results ▁in ▁the ▁final ▁path ▁ending ▁up ▁out sid ▁ e ▁of ▁the ▁target ▁folder . ▁For ▁instance ▁a ▁zip ▁may ▁hold ▁a ▁file ▁with ▁a ▁ " . . / . . / file . ex e " ▁location ▁and ▁thus ▁break ▁out ▁of ▁the ▁target ▁folder . ▁If ▁an executable ▁or ▁a ▁configuration ▁file ▁is overwritten ▁with ▁a ▁file ▁containing malicious ▁code ▁the ▁problem ▁can ▁turn ▁into ▁an ▁arbitrary ▁code ▁execution ▁issue ▁quite ▁easily . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../file.exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily.

SHAP (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the " unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../ file. exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily

IG (subwords)
[CLS] All versions of archive ##r allow attacker to perform a Zip S ##l ip attack via the " un ##ar ##chi ##ve " functions . It is ex ##p ##lo ite d using a spec i ##ally crafted zip archive that holds path traversal filenames . When ex ##p ##lo ite d a filename in a malicious archive is concatenated to the tar get extraction directory which results in the final path ending up out sid e of the tar get folder . For instance a zip may hold a file with a " . . / . . / file . ex ##e " location and thus break out of the tar get folder . If an executable or a config u ##ration file is overwritten with a file containing malicious code the problem can turn int o an arbitrary code exec u ##tion issue q ##u ite easily . [SEP]

LRP (+Pred, pos-only)
[CLS] All versions of archive ##r allow attacker to perform a Zip S ##l ip attack via the " un ##ar ##chi ##ve " functions . It is ex ##p ##lo ite d using a spec i ##ally crafted zip archive that holds path traversal filenames . When ex ##p ##lo ite d a filename in a malicious archive is concatenated to the tar get extraction directory which results in the final path ending up out sid e of the tar get folder . For instance a zip may hold a file with a " . . / . . / file . ex ##e " location and thus break out of the tar get folder . If an executable or a config u ##ration file is overwritten with a file containing malicious code the problem can turn int o an arbitrary code exec u ##tion issue q ##u ite easily . [SEP]

LIME (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../file.exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily.

SHAP (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the " unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../ file. exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily

IG (subwords)
[CLS] All versions of archive ##r allow attacker to perform a Zip S ##l ip attack via the " un ##ar ##chi ##ve " functions . It is ex ##p ##lo ite d using a spec i ##ally crafted zip archive that holds path traversal filenames . When ex ##p ##lo ite d a filename in a malicious archive is concatenated to the tar get extraction directory which results in the final path ending up out sid e of the tar get folder . For instance a zip may hold a file with a " . . / . . / file . ex ##e " location and thus break out of the tar get folder . If an executable or a config u ##ration file is overwritten with a file containing malicious code the problem can turn int o an arbitrary code exec u ##tion issue q ##u ite easily . [SEP]

LRP (+Pred, pos-only)
[CLS] All versions of archive ##r allow attacker to perform a Zip S ##l ip attack via the " un ##ar ##chi ##ve " functions . It is ex ##p ##lo ite d using a spec i ##ally crafted zip archive that holds path traversal filenames . When ex ##p ##lo ite d a filename in a malicious archive is concatenated to the tar get extraction directory which results in the final path ending up out sid e of the tar get folder . For instance a zip may hold a file with a " . . / . . / file . ex ##e " location and thus break out of the tar get folder . If an executable or a config u ##ration file is overwritten with a file containing malicious code the problem can turn int o an arbitrary code exec u ##tion issue q ##u ite easily . [SEP]

LIME (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../file.exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily.

SHAP (words)
All versions of archiver allow attacker to perform a Zip Slip attack via the " unarchive" functions. It is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited a filename in a malicious archive is concatenated to the target extraction directory which results in the final path ending up outside of the target folder. For instance a zip may hold a file with a "../../ file. exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code the problem can turn into an arbitrary code execution issue quite easily

IG (subwords)
▁In ▁ lib FD K ▁there ▁is ▁a ▁po ssi ▁ ble ▁out ▁of ▁bound s ▁write ▁due ▁to ▁an ▁integer overflow ▁ . ▁This ▁could ▁lead ▁to ▁remote ▁code ▁execution ▁with ▁no ▁additional ▁execution ▁privileges ▁needed . User ▁interaction ▁is ▁needed ▁for ▁exploitation . ▁Product : ▁Android Versions ▁ : ▁Android - 10 And roid ▁ID : ▁A - 1 12 66 10 57 <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057

SHAP (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android- 10Android ID: A- 112661057

IG (subwords)
[CLS] In l ##ib ##F ##D ##K there is a p ##o ssi b ##le out of bounds w ##r ite due to an int e ##ger overflow . This could lead to remote code exec u ##tion with no additional exec u ##tion privileges needed . User int era ##ction is needed for exploitation . Product : Android Versions : Android - 10 ##A ##nd ##roid ID : A - 112 ##6 ##6 ##10 ##5 ##7 [SEP]

LRP (+Pred, pos-only)
[CLS] In l ##ib ##F ##D ##K there is a p ##o ssi b ##le out of bounds w ##r ite due to an int e ##ger overflow . This could lead to remote code exec u ##tion with no additional exec u ##tion privileges needed . User int era ##ction is needed for exploitation . Product : Android Versions : Android - 10 ##A ##nd ##roid ID : A - 112 ##6 ##6 ##10 ##5 ##7 [SEP]

LIME (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057

SHAP (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android- 10Android ID: A- 112661057

IG (subwords)
[CLS] In l ##ib ##F ##D ##K there is a p ##o ssi b ##le out of bounds w ##r ite due to an int e ##ger overflow . This could lead to remote code exec u ##tion with no additional exec u ##tion privileges needed . User int era ##ction is needed for exploitation . Product : Android Versions : Android - 10 ##A ##nd ##roid ID : A - 112 ##6 ##6 ##10 ##5 ##7 [SEP]

LRP (+Pred, pos-only)
[CLS] In l ##ib ##F ##D ##K there is a p ##o ssi b ##le out of bounds w ##r ite due to an int e ##ger overflow . This could lead to remote code exec u ##tion with no additional exec u ##tion privileges needed . User int era ##ction is needed for exploitation . Product : Android Versions : Android - 10 ##A ##nd ##roid ID : A - 112 ##6 ##6 ##10 ##5 ##7 [SEP]

LIME (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112661057

SHAP (words)
In libFDK there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android- 10Android ID: A- 112661057

IG (subwords)
▁LI EF ▁commit ▁5 d 1 d 64 3 ▁was ▁di sc ▁over ed ▁to ▁contain ▁a segmentation ▁violation ▁via ▁the ▁function ▁LI EF : : M ach O : : Segment ▁Command : : file _ off set ( ) ▁at ▁ / M ach O / Segment ▁Command . c pp . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

SHAP (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF:: MachO:: SegmentCommand:: file_offset() at / MachO/ SegmentCommand. cpp

IG (subwords)
[CLS] L IE F commit 5 ##d ##1 ##d ##64 ##3 was di sc over ##ed to contain a segmentation violation via the function L IE F : : Mac ##h ##O : : Segment Command : : file _ offset ( ) at / Mac ##h ##O / Segment Command . c ##pp . [SEP]

LRP (+Pred, pos-only)
[CLS] L IE F commit 5 ##d ##1 ##d ##64 ##3 was di sc over ##ed to contain a segmentation violation via the function L IE F : : Mac ##h ##O : : Segment Command : : file _ offset ( ) at / Mac ##h ##O / Segment Command . c ##pp . [SEP]

LIME (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

SHAP (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF:: MachO:: SegmentCommand:: file_offset() at / MachO/ SegmentCommand. cpp

IG (subwords)
[CLS] L IE F commit 5 ##d ##1 ##d ##64 ##3 was di sc over ##ed to contain a segmentation violation via the function L IE F : : Mac ##h ##O : : Segment Command : : file _ offset ( ) at / Mac ##h ##O / Segment Command . c ##pp . [SEP]

LRP (+Pred, pos-only)
[CLS] L IE F commit 5 ##d ##1 ##d ##64 ##3 was di sc over ##ed to contain a segmentation violation via the function L IE F : : Mac ##h ##O : : Segment Command : : file _ offset ( ) at / Mac ##h ##O / Segment Command . c ##pp . [SEP]

LIME (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

SHAP (words)
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF:: MachO:: SegmentCommand:: file_offset() at / MachO/ SegmentCommand. cpp

IG (subwords)
▁IBM Storage ▁Scale Container ▁Native Storage ▁Access ▁5 . 1 . 2 . 1 ▁through ▁5 . 1 . 6 . 1 ▁could ▁allow ▁a ▁local ▁user ▁to ▁obtain escalated ▁privileges ▁on ▁a ▁host ▁without ▁proper ▁security ▁context ▁settings configured ▁ . ▁IBM X-Force ▁ID : ▁23 89 41 . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X-Force ID: 238941.

SHAP (words)
IBM Storage Scale Container Native Storage Access 5. 1. 2. 1 through 5. 1. 6. 1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X- Force ID: 238941

IG (subwords)
[CLS] I BM Storage Scale Container Native Storage Access 5 . 1 . 2 . 1 through 5 . 1 . 6 . 1 could allow a local user to obtain escalated privileges on a host without proper se ##c uri t ##y context settings configured . I BM X-Force ID : 238 ##9 ##41 . [SEP]

LRP (+Pred, pos-only)
[CLS] I BM Storage Scale Container Native Storage Access 5 . 1 . 2 . 1 through 5 . 1 . 6 . 1 could allow a local user to obtain escalated privileges on a host without proper se ##c uri t ##y context settings configured . I BM X-Force ID : 238 ##9 ##41 . [SEP]

LIME (words)
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X-Force ID: 238941.

SHAP (words)
IBM Storage Scale Container Native Storage Access 5. 1. 2. 1 through 5. 1. 6. 1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X- Force ID: 238941

IG (subwords)
[CLS] I BM Storage Scale Container Native Storage Access 5 . 1 . 2 . 1 through 5 . 1 . 6 . 1 could allow a local user to obtain escalated privileges on a host without proper se ##c uri t ##y context settings configured . I BM X-Force ID : 238 ##9 ##41 . [SEP]

LRP (+Pred, pos-only)
[CLS] I BM Storage Scale Container Native Storage Access 5 . 1 . 2 . 1 through 5 . 1 . 6 . 1 could allow a local user to obtain escalated privileges on a host without proper se ##c uri t ##y context settings configured . I BM X-Force ID : 238 ##9 ##41 . [SEP]

LIME (words)
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X-Force ID: 238941.

SHAP (words)
IBM Storage Scale Container Native Storage Access 5. 1. 2. 1 through 5. 1. 6. 1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X- Force ID: 238941

IG (subwords)
▁Multiple vulnerabilities ▁in ▁the web-based ▁man a gem ▁ ent ▁interface ▁of Cisco ▁Small ▁Business ▁ RV 110 W ▁ RV 130 ▁ RV 130 W ▁and ▁ RV 2 15 W Routers ▁could ▁allow ▁an authenticated ▁remote ▁attacker ▁to ▁execute ▁arbitrary ▁code ▁on ▁an ▁affected ▁device ▁or ▁cause ▁the ▁device ▁to ▁restart ▁unexpectedly ▁resulting ▁in ▁a ▁denial ▁of ▁service ▁ ( DoS ▁ ) ▁condition . ▁These vulnerabilities ▁are ▁due ▁to ▁insufficient validation ▁of ▁user ▁fields ▁within ▁incoming HTTP ▁packet s . ▁An ▁attacker ▁could ▁exploit ▁these vulnerabilities ▁by ▁sending ▁a ▁crafted ▁request ▁to ▁the web-based ▁man a gem ▁ ent ▁interface . ▁A ▁successful ▁exploit ▁could ▁allow ▁the ▁attacker ▁to ▁execute ▁arbitrary ▁commands ▁on ▁an ▁affected ▁device ▁with root-level ▁privileges ▁or ▁to ▁cause ▁the ▁device ▁to ▁restart ▁unexpectedly ▁resulting ▁in ▁a DoS ▁condition . ▁To ▁exploit ▁these vulnerabilities ▁an ▁attacker ▁would ▁need ▁to ▁have ▁valid Admin ▁is t rator credential ▁ s ▁on ▁the ▁affected ▁device . Cisco ▁has ▁not ▁released ▁software ▁updates ▁that ▁address ▁these vulnerabilities ▁ . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

SHAP (words)
Multiple vulnerabilities in the web- based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service ( DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web- based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root- level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities

IG (subwords)
[CLS] Mu ##lt ip le vulnerabilities in the web-based man ##a gem en ##t int er ##face of Cisco Small Business RV 110 ##W RV 130 RV 130 ##W and RV 215 ##W Routers could allow an authenticated remote attacker to exec u ##te arbitrary code on an affected dev ice or cause the dev ice to re ##s tar t unexpectedly resulting in a denial of service ( DoS ) condition . These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets . An attacker could exploit these vulnerabilities by sending a crafted request to the web-based man ##a gem en ##t int er ##face . A successful exploit could allow the attacker to exec u ##te arbitrary commands on an affected dev ice with root-level privileges or to cause the dev ice to re ##s tar t unexpectedly resulting in a DoS condition . To exploit these vulnerabilities an attacker would need to have valid Admin is ##tra ##tor credential s on the affected dev ice . Cisco has not released software updates that address these vulnerabilities . [SEP]

LRP (+Pred, pos-only)
[CLS] Mu ##lt ip le vulnerabilities in the web-based man ##a gem en ##t int er ##face of Cisco Small Business RV 110 ##W RV 130 RV 130 ##W and RV 215 ##W Routers could allow an authenticated remote attacker to exec u ##te arbitrary code on an affected dev ice or cause the dev ice to re ##s tar t unexpectedly resulting in a denial of service ( DoS ) condition . These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets . An attacker could exploit these vulnerabilities by sending a crafted request to the web-based man ##a gem en ##t int er ##face . A successful exploit could allow the attacker to exec u ##te arbitrary commands on an affected dev ice with root-level privileges or to cause the dev ice to re ##s tar t unexpectedly resulting in a DoS condition . To exploit these vulnerabilities an attacker would need to have valid Admin is ##tra ##tor credential s on the affected dev ice . Cisco has not released software updates that address these vulnerabilities . [SEP]

LIME (words)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

SHAP (words)
Multiple vulnerabilities in the web- based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service ( DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web- based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root- level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities

IG (subwords)
[CLS] Mu ##lt ip le vulnerabilities in the web-based man ##a gem en ##t int er ##face of Cisco Small Business RV 110 ##W RV 130 RV 130 ##W and RV 215 ##W Routers could allow an authenticated remote attacker to exec u ##te arbitrary code on an affected dev ice or cause the dev ice to re ##s tar t unexpectedly resulting in a denial of service ( DoS ) condition . These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets . An attacker could exploit these vulnerabilities by sending a crafted request to the web-based man ##a gem en ##t int er ##face . A successful exploit could allow the attacker to exec u ##te arbitrary commands on an affected dev ice with root-level privileges or to cause the dev ice to re ##s tar t unexpectedly resulting in a DoS condition . To exploit these vulnerabilities an attacker would need to have valid Admin is ##tra ##tor credential s on the affected dev ice . Cisco has not released software updates that address these vulnerabilities . [SEP]

LRP (+Pred, pos-only)
[CLS] Mu ##lt ip le vulnerabilities in the web-based man ##a gem en ##t int er ##face of Cisco Small Business RV 110 ##W RV 130 RV 130 ##W and RV 215 ##W Routers could allow an authenticated remote attacker to exec u ##te arbitrary code on an affected dev ice or cause the dev ice to re ##s tar t unexpectedly resulting in a denial of service ( DoS ) condition . These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets . An attacker could exploit these vulnerabilities by sending a crafted request to the web-based man ##a gem en ##t int er ##face . A successful exploit could allow the attacker to exec u ##te arbitrary commands on an affected dev ice with root-level privileges or to cause the dev ice to re ##s tar t unexpectedly resulting in a DoS condition . To exploit these vulnerabilities an attacker would need to have valid Admin is ##tra ##tor credential s on the affected dev ice . Cisco has not released software updates that address these vulnerabilities . [SEP]

LIME (words)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

SHAP (words)
Multiple vulnerabilities in the web- based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly resulting in a denial of service ( DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web- based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root- level privileges or to cause the device to restart unexpectedly resulting in a DoS condition. To exploit these vulnerabilities an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities

IG (subwords)
Buffer Overflow ▁found ▁in ▁N gin x ▁N JS ▁allows ▁a ▁remote ▁attacker ▁to ▁execute ▁arbitrary ▁code ▁via ▁the njs ▁_ object _ proper ty param ▁ eter ▁of ▁the njs ▁ / njs ▁_ v m . c ▁function . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.

SHAP (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/ njs_vm. c function

IG (subwords)
[CLS] Buffer Overflow found in Ng ##in ##x N JS allows a remote attacker to exec u ##te arbitrary code via the njs _ object _ property param et ##er of the njs / njs _ v ##m . c function . [SEP]

LRP (+Pred, pos-only)
[CLS] Buffer Overflow found in Ng ##in ##x N JS allows a remote attacker to exec u ##te arbitrary code via the njs _ object _ property param et ##er of the njs / njs _ v ##m . c function . [SEP]

LIME (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.

SHAP (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/ njs_vm. c function

IG (subwords)
[CLS] Buffer Overflow found in Ng ##in ##x N JS allows a remote attacker to exec u ##te arbitrary code via the njs _ object _ property param et ##er of the njs / njs _ v ##m . c function . [SEP]

LRP (+Pred, pos-only)
[CLS] Buffer Overflow found in Ng ##in ##x N JS allows a remote attacker to exec u ##te arbitrary code via the njs _ object _ property param et ##er of the njs / njs _ v ##m . c function . [SEP]

LIME (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.

SHAP (words)
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/ njs_vm. c function

IG (subwords)
▁ OX ▁App ▁Suite ▁through ▁7 . 10 . 5 ▁allows XSS ▁via JavaScript ▁code ▁in ▁an ▁anchor HTML ▁comment ▁within truncated e-mail ▁because ▁there ▁is ▁a ▁predictable ▁U UID ▁with HTML ▁trans for matio ▁ n ▁results . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a predictable UUID with HTML transformation results.

SHAP (words)
OX App Suite through 7. 10. 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e- mail because there is a predictable UUID with HTML transformation results

IG (subwords)
[CLS] OX App Su ite through 7 . 10 . 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a pre ##dic tab le U UID with HTML trans ##fo ##r matio n results . [SEP]

LRP (+Pred, pos-only)
[CLS] OX App Su ite through 7 . 10 . 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a pre ##dic tab le U UID with HTML trans ##fo ##r matio n results . [SEP]

LIME (words)
OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a predictable UUID with HTML transformation results.

SHAP (words)
OX App Suite through 7. 10. 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e- mail because there is a predictable UUID with HTML transformation results

IG (subwords)
[CLS] OX App Su ite through 7 . 10 . 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a pre ##dic tab le U UID with HTML trans ##fo ##r matio n results . [SEP]

LRP (+Pred, pos-only)
[CLS] OX App Su ite through 7 . 10 . 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a pre ##dic tab le U UID with HTML trans ##fo ##r matio n results . [SEP]

LIME (words)
OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail because there is a predictable UUID with HTML transformation results.

SHAP (words)
OX App Suite through 7. 10. 5 allows XSS via JavaScript code in an anchor HTML comment within truncated e- mail because there is a predictable UUID with HTML transformation results

IG (subwords)
▁Dec k ▁is ▁a ▁ kan ban ▁style ▁organization ▁tool ▁aimed ▁at ▁personal ▁planning ▁and ▁project ▁organization ▁for ▁teams ▁integrated ▁with Nextcloud ▁ . ▁In ▁affected ▁versions ▁users ▁could ▁be tricked ▁into ▁executing malicious ▁code ▁that ▁would ▁execute ▁in ▁their browse ▁ r ▁via HTML ▁sent ▁as ▁a ▁comment . ▁It ▁is ▁recommended ▁that ▁the Nextcloud ▁Dec k ▁is ▁upgraded ▁to ▁version ▁1 . 9 . 5 ▁or ▁1 . 11 . 2 . ▁There ▁are ▁no ▁known workarounds ▁for ▁this ▁vulnerability . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions users could be tricked into executing malicious code that would execute in their browser via HTML sent as a comment. It is recommended that the Nextcloud Deck is upgraded to version 1.9.5 or 1.11.2. There are no known workarounds for this vulnerability.

SHAP (words)
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions users could be tricked into executing malicious code that would execute in their browser via HTML sent as a comment. It is recommended that the Nextcloud Deck is upgraded to version 1. 9. 5 or 1. 11. 2. There are no known workarounds for this vulnerability